Török Edwin wrote:
>
> On 04/22/2010 10:24 AM, Török Edwin wrote:
>>> lxhv1m02:~# grep ctl /etc/amavis/conf.d/15-av_scanners
>>> \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamav/clamd.ctl"],
>
> You need to tell amavis to pass the entire message to ClamAV, try:
> $bypass_decode_parts = 1;
>
> I think your amavis tried to decode the message, and pass only parts of
> it to ClamAV.
>
> Best regards,
> --Edwin
> _______________________________________________
> Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
> http://www.clamav.net/support/ml
>
>
BINGO!
After setting $bypass_decode_parts = 1; the virus was found:
lxhv1m02:/etc/amavis/conf.d# tail -n 2 /var/log/clamav/clamav.log
Thu Apr 22 13:39:02 2010 ->
/var/lib/amavis/tmp/amavis-20100422T133603-19502/parts/p001:
Suspect.Bredozip-zippwd-5 FOUND
Thu Apr 22 13:40:56 2010 ->
/var/lib/amavis/tmp/amavis-20100422T134024-20718/parts/p001:
Suspect.Bredozip-zippwd-5 FOUND
Thank You very much Edwin,
Regards Thomas
--
View this message in context:
http://old.nabble.com/clamav-daemon-didn%27t-recognise-attached-virus-tp28288042p28327757.html
Sent from the clamav-users mailing list archive at Nabble.com.
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
